[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 30.737187] random: sshd: uninitialized urandom read (32 bytes read) [ 30.955439] kauditd_printk_skb: 11 callbacks suppressed [ 30.955448] audit: type=1400 audit(1561009912.569:35): avc: denied { map } for pid=7010 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 31.031278] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.721108] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. [ 37.324487] random: sshd: uninitialized urandom read (32 bytes read) 2019/06/20 05:51:59 fuzzer started [ 37.518524] audit: type=1400 audit(1561009919.129:36): avc: denied { map } for pid=7021 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.445884] random: cc1: uninitialized urandom read (8 bytes read) 2019/06/20 05:52:01 dialing manager at 10.128.0.105:36079 2019/06/20 05:52:02 syscalls: 2444 2019/06/20 05:52:02 code coverage: enabled 2019/06/20 05:52:02 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/06/20 05:52:02 extra coverage: extra coverage is not supported by the kernel 2019/06/20 05:52:02 setuid sandbox: enabled 2019/06/20 05:52:02 namespace sandbox: enabled 2019/06/20 05:52:02 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/20 05:52:02 fault injection: enabled 2019/06/20 05:52:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/20 05:52:02 net packet injection: enabled 2019/06/20 05:52:02 net device setup: enabled [ 41.441191] random: crng init done 05:53:30 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 05:53:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x4) readv(r0, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) 05:53:30 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002880), 0x1000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001540)="c0dca5055e0bcfec7be070") open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ENTRY(r0, &(0x7f0000000280)={0x90, 0x0, 0x2, {0x201, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c0f}}}, 0x90) 05:53:30 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x4008af00, &(0x7f0000000180)) [ 128.533516] audit: type=1400 audit(1561010010.149:37): avc: denied { map } for pid=7021 comm="syz-fuzzer" path="/root/syzkaller-shm165009365" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 05:53:30 executing program 0: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) getgroups(0x2, &(0x7f0000000500)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0x0, r1) 05:53:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0xffff8880963f7001) [ 128.590490] audit: type=1400 audit(1561010010.209:38): avc: denied { map } for pid=7039 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=12924 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 129.450216] IPVS: ftp: loaded support on port[0] = 21 [ 129.765109] chnl_net:caif_netlink_parms(): no params data found [ 129.776972] IPVS: ftp: loaded support on port[0] = 21 [ 129.832582] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.839011] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.846096] device bridge_slave_0 entered promiscuous mode [ 129.855506] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.861949] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.868956] device bridge_slave_1 entered promiscuous mode [ 129.891380] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 129.900536] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 129.924847] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 129.932247] team0: Port device team_slave_0 added [ 129.944663] IPVS: ftp: loaded support on port[0] = 21 [ 129.953511] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 129.961771] team0: Port device team_slave_1 added [ 129.978654] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 129.988506] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 130.081968] device hsr_slave_0 entered promiscuous mode [ 130.161130] device hsr_slave_1 entered promiscuous mode [ 130.240392] chnl_net:caif_netlink_parms(): no params data found [ 130.249492] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 130.263088] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 130.290371] IPVS: ftp: loaded support on port[0] = 21 [ 130.336897] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.343747] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.351395] device bridge_slave_0 entered promiscuous mode [ 130.367593] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.374196] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.381369] device bridge_slave_1 entered promiscuous mode [ 130.391547] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.398031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.405007] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.411499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.467944] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.481778] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.509459] chnl_net:caif_netlink_parms(): no params data found [ 130.534708] IPVS: ftp: loaded support on port[0] = 21 [ 130.545503] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 130.554234] team0: Port device team_slave_0 added [ 130.569242] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 130.576547] team0: Port device team_slave_1 added [ 130.582068] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 130.589489] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 130.685460] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.692021] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.699391] device bridge_slave_0 entered promiscuous mode [ 130.742111] device hsr_slave_0 entered promiscuous mode [ 130.780313] device hsr_slave_1 entered promiscuous mode [ 130.833819] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 130.848389] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.854994] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.862336] device bridge_slave_1 entered promiscuous mode [ 130.868921] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.876254] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.884810] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 130.906277] chnl_net:caif_netlink_parms(): no params data found [ 130.957008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.971092] IPVS: ftp: loaded support on port[0] = 21 [ 130.976632] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.987672] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.006630] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 131.014109] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 131.042920] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 131.050337] team0: Port device team_slave_0 added [ 131.056043] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 131.063722] team0: Port device team_slave_1 added [ 131.069492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 131.077353] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 131.101866] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.113740] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.120768] device bridge_slave_0 entered promiscuous mode [ 131.128401] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.135306] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.142585] device bridge_slave_1 entered promiscuous mode [ 131.193655] device hsr_slave_0 entered promiscuous mode [ 131.250519] device hsr_slave_1 entered promiscuous mode [ 131.303624] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 131.311084] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 131.333495] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 131.346025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.353722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.387403] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 131.406120] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 131.412406] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.446991] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.456321] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.475056] chnl_net:caif_netlink_parms(): no params data found [ 131.501808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.514643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.522706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.531018] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.537411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.561997] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 131.569428] team0: Port device team_slave_0 added [ 131.585356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.598720] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 131.606171] team0: Port device team_slave_1 added [ 131.614723] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 131.624174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.632276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.639839] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.646288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.662774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.670256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.692018] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 131.715258] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.722454] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.729333] device bridge_slave_0 entered promiscuous mode [ 131.764952] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.772333] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.779215] device bridge_slave_1 entered promiscuous mode [ 131.787931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.853964] device hsr_slave_0 entered promiscuous mode [ 131.890523] device hsr_slave_1 entered promiscuous mode [ 131.943122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.954145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.965438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 131.976434] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 131.997964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.006615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.014826] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 132.023398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.030375] chnl_net:caif_netlink_parms(): no params data found [ 132.043159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 132.052187] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 132.059878] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.067015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.074900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.082586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.090670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.099853] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 132.114021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.125138] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 132.143239] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 132.172240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 132.179281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.189961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.198546] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 132.206871] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 132.222831] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 132.229078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.239867] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.247614] team0: Port device team_slave_0 added [ 132.252846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.259728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.266729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.274086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.283417] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 132.289499] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.312675] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.319135] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.326516] device bridge_slave_0 entered promiscuous mode [ 132.333150] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.342626] team0: Port device team_slave_1 added [ 132.348777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 132.357556] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 132.363767] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.373863] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 132.380388] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.386785] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.394447] device bridge_slave_1 entered promiscuous mode [ 132.401376] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 132.410012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 132.418636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 132.430858] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 132.439809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.477975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.486362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.494793] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.501285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.508494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.517006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.524662] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.531036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.542100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 132.594138] device hsr_slave_0 entered promiscuous mode [ 132.640425] device hsr_slave_1 entered promiscuous mode [ 132.701260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 132.708540] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 132.715767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.723073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.730771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.739285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.747028] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.753391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.760821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.768492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.776504] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.782999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.791499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.801521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.810171] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 132.821862] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 132.829574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.843163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.851525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.859291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.872732] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 132.883535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.899472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.913377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.921394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.929039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.937386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.949760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.972273] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.979570] team0: Port device team_slave_0 added [ 132.993602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 05:53:34 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x36b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x3e3) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) [ 133.006633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.016248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.027800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.038044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.048076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.056390] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.064129] team0: Port device team_slave_1 added [ 133.069746] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.080751] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.095204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.102580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.110256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.119317] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 133.135922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.145044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 05:53:34 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000006c0)) 05:53:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto(r0, &(0x7f0000000040)="b6", 0x1, 0x1, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) sync() ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bind(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) readv(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000080)=""/41, 0x29}, {&(0x7f00000001c0)=""/216, 0xd8}], 0x3) [ 133.158091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 133.171727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.179219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.187052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.194749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.243818] device hsr_slave_0 entered promiscuous mode [ 133.260548] device hsr_slave_1 entered promiscuous mode 05:53:34 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0x20000000000000b, @vbi}}) [ 133.301013] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 133.310806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 133.332825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 133.344238] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 05:53:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x3, 0x20000000084) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x13, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001280)=0x78) [ 133.356017] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 133.373033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.384474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.394343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.409261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.418070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.425078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.434489] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 133.446715] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 133.452926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.461663] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 133.467691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.477350] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 133.485291] 8021q: adding VLAN 0 to HW filter on device team0 05:53:35 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x313) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280), 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000240)=0x1e) [ 133.509025] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 133.519149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.528692] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 133.538261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 133.564439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.572870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.584361] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.590784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.599103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 05:53:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x204000000bd, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc02c5341, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'qbeue0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 133.609312] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 133.621609] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 133.635505] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 133.642076] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.644633] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 133.664828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.673531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.681572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.689168] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.695569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.702829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.709645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.719919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 133.731217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.740787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 133.755468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 133.767341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 133.775038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.783149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.791036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.798723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.806636] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.813001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.820598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.828331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.836021] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.842395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.849594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.862709] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.880628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 133.891181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 133.899285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.909796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.917892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.925636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.933633] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.944366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.958348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.965294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.977212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.987150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.998270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.007349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.017080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 134.036639] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 134.046984] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.054402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.062471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.069927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.079125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.107017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.118275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 134.134830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.146385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.158934] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 134.168030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 134.183956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 134.192270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.199769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.207590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.215128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.228536] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 134.238647] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 134.245581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.256825] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 134.263111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.270770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.278639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.288640] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 134.295554] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.314445] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 05:53:35 executing program 2: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) [ 134.323177] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 134.342211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.350464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 134.389157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 134.397693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.407148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.415800] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.422256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.429942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.438959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.446969] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.453382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.461335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.473314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 134.480668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.489918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.506381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 134.526398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.550597] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 134.559968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 134.570604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 134.578314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.586914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.594747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.602824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.610885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.618496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.626388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.638823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 134.648197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.659836] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 134.666003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.674558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.682182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.703028] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 134.715357] 8021q: adding VLAN 0 to HW filter on device batadv0 05:53:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x81a0ae8c, &(0x7f0000000040)) 05:53:38 executing program 4: mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000003cff6)='./control\x00', 0x220001a1) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) read(r0, 0x0, 0x0) 05:53:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") symlinkat(0x0, 0xffffffffffffffff, 0x0) 05:53:38 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x1, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x127f, 0x0) 05:53:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfc}, 0x80) 05:53:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x3, 0x20000000084) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x8, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001280)=0x78) 05:53:38 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x20000000000000b, @vbi={0x0, 0xffffffff}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x5, 0x2, {0xb, @sdr={0x0, 0xffffffff}}}) 05:53:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000200)=""/247) 05:53:38 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) pread64(r0, &(0x7f0000000240)=""/243, 0xf3, 0x3) 05:53:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) [ 136.751204] kasan: CONFIG_KASAN_INLINE enabled 05:53:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socket$netlink(0x10, 0x3, 0x1e) [ 136.775814] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 136.824372] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 136.824653] kobject: '0:43' (ffff8880644a29d0): kobject_uevent_env [ 136.830653] Modules linked in: [ 136.830665] CPU: 0 PID: 7178 Comm: syz-executor.1 Not tainted 4.14.128 #22 [ 136.830669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.830674] task: ffff88806478c580 task.stack: ffff888064790000 [ 136.830686] RIP: 0010:refcount_sub_and_test+0x2b/0xf0 [ 136.830690] RSP: 0018:ffff888064797b98 EFLAGS: 00010202 [ 136.830696] RAX: dffffc0000000000 RBX: ffff8880862542c0 RCX: ffffffff8424cd80 [ 136.830700] RDX: 0000000000000004 RSI: 0000000000000020 RDI: 0000000000000001 [ 136.830704] RBP: ffff888064797bc0 R08: 00000000bddf2785 R09: ffff88806478ce48 [ 136.830708] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000020 [ 136.830711] R13: 0000000000000001 R14: ffff8880862542d4 R15: 0000000000000000 [ 136.830717] FS: 000000000271d940(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 136.830721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.830724] CR2: 000000000075c000 CR3: 000000009fbd6000 CR4: 00000000001406f0 [ 136.830732] Call Trace: [ 136.830742] refcount_dec_and_test+0x1b/0x20 [ 136.830752] vb2_vmalloc_put+0x18/0x70 [ 136.830759] __vb2_buf_mem_free+0x103/0x1e0 [ 136.830767] ? vb2_vmalloc_dmabuf_ops_attach+0x3f0/0x3f0 [ 136.830774] __vb2_queue_free+0x634/0x7d0 [ 136.830785] vb2_core_queue_release+0x64/0x80 [ 136.830793] _vb2_fop_release+0x1cf/0x2a0 [ 136.830801] vb2_fop_release+0x75/0xc0 [ 136.830809] vivid_fop_release+0x180/0x3f0 [ 136.830816] ? vivid_remove+0x3d0/0x3d0 [ 136.830822] ? dev_debug_store+0xe0/0xe0 [ 136.830827] v4l2_release+0xf9/0x190 [ 136.830838] __fput+0x275/0x7a0 [ 136.830848] ____fput+0x16/0x20 [ 136.830857] task_work_run+0x114/0x190 [ 136.830870] exit_to_usermode_loop+0x1da/0x220 [ 136.840521] kobject: '0:43' (ffff8880644a29d0): fill_kobj_path: path = '/devices/virtual/bdi/0:43' [ 136.847422] do_syscall_64+0x4bc/0x640 [ 136.847430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 136.847445] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 137.022563] RIP: 0033:0x412fb1 [ 137.025747] RSP: 002b:00007fffc4986330 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 137.033628] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000412fb1 [ 137.040900] RDX: 0000001b2be20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 137.048168] RBP: 0000000000000001 R08: 000000006e783fbb R09: 000000006e783fbf [ 137.055451] R10: 00007fffc4986410 R11: 0000000000000293 R12: 0000000000760b10 [ 137.062740] R13: 0000000000021626 R14: 0000000000021653 R15: 000000000075bf2c 05:53:38 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) pread64(r0, &(0x7f0000000240)=""/243, 0xf3, 0x4000) [ 137.070035] Code: 55 48 89 e5 41 56 41 55 41 89 fd 41 54 49 89 f4 53 48 83 ec 08 e8 86 b6 85 fe 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 137.089234] RIP: refcount_sub_and_test+0x2b/0xf0 RSP: ffff888064797b98 [ 137.114345] kobject: 'loop4' (ffff8880a4aab2a0): kobject_uevent_env [ 137.126085] kobject: '0:43' (ffff8880644a29d0): kobject_cleanup, parent (null) [ 137.137579] kobject: 'loop4' (ffff8880a4aab2a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 137.149783] kobject: 'loop2' (ffff8880a49f6920): kobject_uevent_env [ 137.156451] kobject: '0:43' (ffff8880644a29d0): calling ktype release [ 137.163251] kobject: 'loop2' (ffff8880a49f6920): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 137.165866] ---[ end trace b8095f44b55c64de ]--- [ 137.173137] kobject: '0:43': free name [ 137.179929] Kernel panic - not syncing: Fatal exception [ 137.188402] Kernel Offset: disabled [ 137.192030] Rebooting in 86400 seconds..